p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости firefox-esr · Страница 13

За последние 30 дней в firefox-esr опубликовано уязвимостей: 206; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 1382

  1. CVE-2026-100787

    Критический · CVSS 9.6EPSS 0,3%Есть исправление

    Sandbox escape in the XUL component

    Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  2. CVE-2026-100786

    Критический · CVSS 9.6EPSS 0,32%Есть исправление

    Sandbox escape due to use-after-free in the Graphics component

    Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  3. CVE-2026-100785

    Высокий · CVSS 8.8EPSS 0,32%Есть исправление

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  4. CVE-2026-100784

    Высокий · CVSS 8.8EPSS 0,33%Есть исправление

    Use-after-free in the Layout: Text and Fonts component

    Use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  5. CVE-2026-100783

    Средний · CVSS 4.3EPSS 0,35%Есть исправление

    Uninitialized memory in the Audio/Video component

    Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  6. CVE-2026-100782

    Высокий · CVSS 8.8EPSS 0,26%Есть исправление

    Privilege escalation due to incorrect boundary conditions in the Graphics component

    Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  7. CVE-2026-100781

    Критический · CVSS 9.6EPSS 0,33%Есть исправление

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component

    Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  8. CVE-2026-100780

    Высокий · CVSS 8.8EPSS 0,32%Есть исправление

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  9. CVE-2026-100779

    Высокий · CVSS 8.8EPSS 0,33%Есть исправление

    Use-after-free in the XSLT component

    Use-after-free in the XSLT component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  10. CVE-2026-100778

    Критический · CVSS 9.6EPSS 0,32%Есть исправление

    Sandbox escape due to use-after-free in the DOM: Core & HTML component

    Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  11. CVE-2026-100777

    Высокий · CVSS 8.8EPSS 0,32%Есть исправление

    Use-after-free in the Graphics: Canvas2D component

    Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  12. CVE-2026-100776

    Высокий · CVSS 8.8EPSS 0,31%Есть исправление

    Use-after-free in the JavaScript: WebAssembly component

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  13. CVE-2026-100775

    Критический · CVSS 9.6EPSS 0,33%Есть исправление

    Sandbox escape in the Graphics component

    Sandbox escape in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  14. CVE-2026-100774

    Высокий · CVSS 8.8EPSS 0,32%Есть исправление

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  15. CVE-2026-100773

    Высокий · CVSS 8.8EPSS 0,4%Есть исправление

    Use-after-free in the Storage: IndexedDB component

    Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  16. CVE-2026-100772

    Высокий · CVSS 8.8EPSS 0,31%Есть исправление

    Use-after-free in the DOM: Core & HTML component

    Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  17. CVE-2026-100771

    Высокий · CVSS 8.1EPSS 0,31%Есть исправление

    Undefined behavior in the DOM: Streams component

    Undefined behavior in the DOM: Streams component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  18. CVE-2026-100770

    Критический · CVSS 9.6EPSS 0,32%Есть исправление

    Sandbox escape due to use-after-free in the DOM: Content Processes component

    Sandbox escape due to use-after-free in the DOM: Content Processes component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  19. CVE-2026-100769

    Высокий · CVSS 8.8EPSS 0,32%Есть исправление

    Use-after-free in the JavaScript: WebAssembly component

    Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено
  20. CVE-2026-100767

    Высокий · CVSS 8.8EPSS 0,33%Есть исправление

    Use-after-free in the Networking: Cache component

    Use-after-free in the Networking: Cache component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    • Обновитесь до 153.4.0esr-1~deb12u1
    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →